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CONTROLLER'S  OFFICE 
CITY  SERVICES  AUDITOR 

The  City  Services  Auditor  was  created  within  the  Controller's  Office  through  an  amendment  to  the 
City  Charter  that  was  approved  by  voters  in  November  2003.  Under  Appendix  F  to  the  City  Charter, 
the  City  Services  Auditor  has  broad  authority  for: 

•  Reporting  on  the  level  and  effectiveness  of  San  Francisco's  public  services  and 
benchmarking  the  city  to  other  public  agencies  and  jurisdictions. 

•  Conducting  financial  and  performance  audits  of  city  departments,  contractors,  and  functions 
to  assess  efficiency  and  effectiveness  of  processes  and  services. 

•  Operating  a  whistleblower  hotline  and  website  and  investigating  reports  of  waste,  fraud,  and 
abuse  of  city  resources. 

•  Ensuring  the  financial  integrity  and  improving  the  overall  performance  and  efficiency  of  city 
government. 

The  audits  unit  conducts  financial  audits,  attestation  engagements,  and  performance  audits.  Financial 
audits  address  the  financial  integrity  of  both  city  departments  and  contractors  and  provide  reasonable 
assurance  about  whether  financial  statements  are  presented  fairly  in  all  material  aspects  in 
conformity  with  generally  accepted  accounting  principles.  Attestation  engagements  examine,  review, 
or  perform  procedures  on  a  broad  range  of  subjects  such  as  internal  controls;  compliance  with 
requirements  of  specified  laws,  regulations,  rules,  contracts,  or  grants;  and  the  reliability  of 
performance  measures.  Performance  audits  focus  primarily  on  assessment  of  city  services  and 
processes,  providing  recommendations  to  improve  department  operations. 

We  conduct  our  audits  in  accordance  with  the  Government  Auditing  Standards  published  by  the  U.S. 
Government  Accountability  Office  (GAO).  These  standards  require: 

•  Independence  of  audit  staff  and  the  audit  organization. 

•  Objectivity  of  the  auditors  performing  the  work. 

•  Competent  staff,  including  continuing  professional  education. 

•  Quality  control  procedures  to  provide  reasonable  assurance  of  compliance  with  the  auditing 
standards. 


Audit  Team:    Ben  Carlick,  Audit  Manager 

Rob  Malone,  Associate  Auditor 
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March  30,  2010 

San  Francisco  Airport  Comnnission 
P.O.  Box  8097 

San  Francisco  International  Airport 
San- Francisco,  CA  94128 

President  and  Members: 

The  Controller's  Office,  City  Services  Auditor,  presents  its  audit  report  concerning  the  cash 
handling  audit  of  the  Ground  Transportation  Unit  (GTU)  at  San  Francisco  International  Airport 
(Airport).  The  GTU  is  responsible  for  issuing  and  managing  permits  for  operators  that  transport 
air  passengers  to  and  from  the  Airport,  conducting  periodic  safety  inspections  of  operator 
vehicles,  monitoring  operator  adherence  to  terms  and  conditions  of  their  permits,  and  accepting 
payments  from  permit  holders.  The  period  covered  by  the  audit  was  May  1 ,  2009,  through 
October  30,  2009. 

The  audit  found  that  the  GTU's  cash  handling  procedures  are  generally  adequate.  However,  the 
audit  team  found  that  the  GTU  did  not  consistently  follow  its  established  procedures  and 
identified  some  areas  in  which  its  procedures  should  be  improved. 

The  audit  Includes  nine  recommendations  for  improving  the  GTU's  cash  handling  procedures. 
The  Airport's  response  to  the  audit  is  included  as  Attachment  A.  The  Controller's  Office,  City 
Services  Auditor,  will  follow  up  with  the  Airport  on  the  status  of  the  recommendations  made  in 
this  report. 

Respectfully  submitted, 


Tonia  Lediju 
Director  of  Audits 

cc:  Mayor 

Board  of  Supervisors 
Civil  Grand  Jury 
Budget  Analyst 
Public  Library 


415-554-7500 


City  Hall  •  1  Dr.  Carlton  B.  Goodlett  Place  •  Room  316  •  San  Francisco  CA  94102-4694 


FAX  415-554-7466 
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INTRODUCTION 


Audit  Authority  The  City  Charter  provides  the  Controller,  City  Services 

Auditor  (CSA),  with  broad  authority  to  conduct  audits.  This 
audit  was  conducted  under  that  authority  and  pursuant  to 
an  audit  plan  agreed  to  by  the  Controller  and  the  Airport. 

Background  The  Airport  Ground  Transportation  Unit  (GTU)  is 

responsible  for  issuing  and  managing  permits  for  operators 
that  transport  air  passengers  to  San  Francisco  International 
Airport  (Airport),  conducting  periodic  safety  inspection  of 
operator  vehicles,  and  monitoring  operator  adherence  to 
the  terms  and  conditions  of  their  permits.  The  GTU  is  a  unit 
of  the  Landside  Operations  Division. 

Operators  include  all  types  of  transport  used  by  air 
passengers,  including  buses,  shuttles,  limousines,  and 
taxis.  Operators  pay  three  types  of  fees  to  the  Airport: 

•  Monthly  fees  for  vehicle  usage  of  the  Airport  access 
road.  The  Airport  issues  an  electronic  transponder  to 
each  permitted  vehicle,  which  allows  the  Airport  to 
record  the  number  of  trips  each  vehicle  makes. 

•  Fees  for  vehicle  registrations  and  vehicle  safety 
inspections. 

•  One-time  fees  for  replacing  lost  transponders  or  for 
violating  permit  terms  and  conditions  (e.g.,  no 
registration  decal). 

The  GTU  has  annual  receipts  of  approximately  $5.2  million. 
The  Airport's  systems  do  not  track  the  location  at  which  It 
receives  a  payment.  According  to  Airport  staff,  operators 
remit  most  payments  by  mail,  some  payments  in  person  at 
the  GTU  office,  and  a  few  payments  in  person  at  Landside 
Operations'  office.  Mailed  payments  are  not  handled  by 
GTU  personnel;  they  are  processed  by  the  Airport's 
Accounting  unit  (Accounting)  staff.  All  payments  must  be 
made  by  credit  card,  certified  check,  cashier's  check,  or 
money  order.  The  Airport  does  not  accept  currency  (paper 
money)  or  personal  checks  as  payment  from  operators. 
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The  GTU  has  undergone  significant  changes  in  the  18 
months  ending  in  October  2009.  The  current  manager, 
assistant  manager,  and  principal  clerk  all  joined  the  GTU 
during  this  time.  Also,  the  Airport  implemented  new 
business  management  software  in  October  2008.  The  GTU 
incorporated  this  software  into  new  cash  handling 
procedures  for  the  unit,  adopted  in  April  2009. 

The  assistant  deputy  airport  director  who  oversees  the  GTU 
stated  that  some  existing  procedures  are  inefficient  partly 
because  the  Airport's  new  business  management  software 
was  not  designed  specifically  for  the  GTU's  processes.  He 
further  stated  that  the  GTU's  goal  is  to  streamline  cash 
handling  procedures.  To  this  end,  the  GTU  plans  to 
minimize  walk-in  payments  by  implementing  an  online 
payment  service.  This  service  is  planned  as  part  of  a  new 
overall  management  software  solution  for  the  GTU,  with 
expected  completion  by  spring  of  201 1 . 

Objectives  The  purpose  of  the  audit  was  to  determine  whether  the 

GTU  has  adequate  internal  controls  over  payments 
received  by  GTU  staff. 

Scope  and  Methodology        The  auditors  reviewed  cash  payments  received  in  the  GTU 

office  from  May  2009  through  October  2009.  To  conduct 
the  audit,  the  audit  team: 

•  Analyzed  the  GTU's  cash  handling  controls  through 
review  of  written  procedures  and  interviews  with  GTU 
and  Airport  accounting  staff. 

•  Assessed  the  risks  associated  with  identified 
weaknesses  in  the  GTU's  cash  handling  controls. 

•  Tested  a  sample  of  transactions  for  adherence  to  key 
cash  handling  procedures,  timeliness  of  check 
processing,  and  completeness  and  accuracy  of 
summary  reports  submitted  by  the  GTU  to  the 
accounting  unit. 

•  Reviewed  a  sample  bank  reconciliation  prepared 
monthly  by  the  accounting  unit  in  order  to  detect  any 
errors  or  irregularities  related  to  GTU  cash  handling. 


Management  and  system 
changes 
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This  audit  did  not  review  payments  received  by  the 
accounting  unit  through  the  mail  or  wall<-in  payments 
accepted  by  other  units  of  the  Landside  Operations 
Division. 

This  performance  audit  was  conducted  in  accordance  with 
generally  accepted  government  auditing  standards.  These 
standards  require  planning  and  performing  the  audit  to 
obtain  sufficient,  appropriate  evidence  to  provide  a 
reasonable  basis  for  the  findings  and  conclusions  based  on 
the  audit  objectives.  We  believe  that  the  evidence  obtained 
provides  a  reasonable  basis  for  the  findings  and 
conclusions  based  on  the  audit  objectives. 


3 


Page  intentionally  left  blank. 


AUDIT  RESULTS 


The  GTU's  Cash 
Handling  Procedures  Are 
Generally  Adequate 


The  GTU's  established  cash  handling  procedures  provide 
reasonable  assurance  that  cash^  is  properly  received, 
recorded,  and  transferred  to  the  Airport's  accounting  unit  for 
processing.  Many  GTU  cash  handling  procedures  are 
adequate.  For  example,  the  procedures: 


Provide  for  proper  segregation  of  cash  handling  duties 
among  staff  members. 


GTU  Did  Not  Follow  Its 
Written  Cash  Handling 
Procedures 


Checks  not  deposited  timely 


•  Require  the  manager's  or  assistant  manager's  signature 
approval  of  all  payments  before  they  are  forwarded  to 
the  accounting  unit  for  posting. 

•  Provide  for  secure  delivery  of  received  checks  and 
money  orders  to  the  accounting  unit  for  final  processing 
and  deposit  to  the  bank. 

However,  the  GTU's  actual  practices  have  not  conformed  to 
its  established  procedures.  Further,  existing  procedures  do 
not  provide  for  an  appropriate  level  of  accountability  and 
record  keeping  for  the  payments  GTU  receives. 

While  the  GTU's  established  cash  handling  procedures 
during  the  audit  period  were  generally  adequate,  the  audit 
found  that  the  GTU  sometimes  did  not  follow  its  own 
procedures. 

Review  of  check  batches  sent  to  the  accounting  unit  on 
three  sample  days  in  June  2009  showed  that  GTU  staff  did 
not  process  checks  in  a  timely  manner.  The  auditors 
reviewed  58  checks,  and  found  that  55  checks  (95  percent) 
were  not  deposited  within  three  days  of  the  check  date.  Of 
the  58  checks,  30  checks  (52  percent)  were  dated  at  least 
three  weeks  prior  to  the  deposit  date.  Although  it  is 
customary  to  deposit  cash  receipts  within  one  business  day, 
the  audit  team  determined  that  it  is  reasonable  to  expect  the 
accounting  unit  to  deposit  checks  accepted  at  the  GTU 
within  three  business  days  from  the  date  the  GTU  received 
the  check.  Three  business  days  allows  the  GTU  up  to  two 
days  to  accept  and  transfer  a  check  to  the  accounting  unit, 
and  allows  the  accounting  unit  one  day  to  process  and 


^  in  this  context,  cash  refers  to  checks,  money  orders,  cashier's  checks,  and  credit/debit  card  payments. 
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deposit  the  check. 


Timely  processing  and  deposit  of  cash  payments  improve 
the  Airport's  cash  flow  and  help  ensure  that  Airport  funds 
are  properly  accounted  for.  The  GTU's  assistant  manager 
explained  that  the  delay  in  processing  checks  resulted  from 
significant  management  and  operational  changes  during 
June  2009,  including  significant  staff  turnover  and  new 
accounting  software.  The  assistant  deputy  airport  director 
over  the  GTU  concurred  that  the  challenges  faced  during 
this  time  were  significant,  but  stated  that  staff  should  have 
prioritized  the  timely  processing  of  cash  payments. 


Payment  batch  summaries 
not  properly  prepared  and 
approved 


The  auditors  reviewed  seven  payment  batches  from  June 
2009  and  found  that  GTU  staff  did  not  adhere  to  established 
procedures  for  the  preparation  and  approval  of  payment 
batch  summaries.  The  payment  batch  summary  is  a 
document  that  provides  key  information  about  each  of  the 
payments  accepted,  and  serves  as  a  cover  sheet  for 
transmittal  of  the  payment  batch  to  the  accounting  unit.  Of 
the  seven  batches  reviewed,  two  batches  did  not  have  a 
batch  summary,  and  three  included  batch  summaries  that 
did  not  have  the  preparer's  initials  and  manager's  signature. 
GTU  procedures  require  payment  batches  be  sent  to  the 
accounting  unit  under  cover  of  a  batch  summary  that  is 
prepared  and  initialed  by  a  designated  staff  member,  then 
approved  by  signature  of  either  the  manager  or  assistant 
manager.  This  is  an  appropriate  cash  handling  procedure 
that  includes  adequate  segregation  of  duties  and 
management  review. 


Some  checks  forwarded  to 
the  accounting  unit  without  an 
invoice  number 


The  audit  team  reviewed  72  check  and  credit  card 
transactions  sent  to  the  accounting  unit,  and  found  that  10 
transactions  (14  percent)  did  not  include  an  invoice  number. 
The  invoice  number  relates  the  payment  to  an  accounts 
receivable  entry  in  the  Airport's  accounting  system.  Noting 
the  invoice  number  on  the  check  or  credit  card  helps  ensure 
that  the  payment  is  properly  recorded  in  the  Airport's 
accounting  records. 


Recommendations 


The  GTU  should: 


1 .  Perform  manager  spot  checks  to  ensure  that  staff  are 
routinely  following  established  cash  handling 
procedures. 
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2. 


Ensure  that  all  check  payments  are  transmitted  to  the 
accounting  unit  by  the  next  business  day. 


3.  When  transmitting  checks  to  the  accounting  unit, 
prepare  and  include  a  deposit  summary  that  is  initialed 
by  the  preparer  and  signed  as  approved  by  the 
manager. 

4.  Require  staff  to  record  the  invoice  number  on  every 
check  and  credit  card  receipt  processed. 


Procedures  Not 
Documented  for  Checks 
Held  Overnight 


GTU  staff  stated  that  some  check  payments  are  held 
overnight  at  the  GTU  on  a  regular  basis.  This  occurs 
because  the  final  courier  run  of  the  day  for  delivery  of 
checks  to  the  accounting  unit  is  at  2:30  p.m.  GTU  staff 
place  any  checks  accepted  after  this  time  in  either  a  locked 
safe  or  the  manager's  locked  office  for  overnight 
safekeeping. 


These  procedures  for  held  checks  are  adequate,  but  they 
are  not  documented  in  the  GTU's  written  cash  handling 
procedures.  The  procedures  should  clearly  document  all 
key  cash  handling  practices  so  that  staff  can  refer  to  them 
for  guidance. 


Recommendation 


The  GTU  should: 


GTU's  Procedures  Do 
Not  Identify  Who 
Accepted  Each  Payment 


5.  Update  its  written  cash  handling  procedures  to  include 
procedures  for  handling  any  checks  held  overnight. 

Current  procedures  do  not  require  staff  to  document  who  at 
the  GTU  accepted  each  payment.  Management  needs  a 
detailed  record  of  who  accepted  each  payment  to  permit 
efficient  follow  up  on  any  questions  or  concerns  regarding  a 
given  payment  transaction. 


GTU  staff  members  follow  the  following  procedures  to 
accept  and  process  payments: 

•    Check  and  money  order  payments  are  stamped  with  a 
generic  deposit  endorsement  stamp. 


Credit  card  payments  are  processed  on  a  common 
credit  card  machine. 
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•  Invoices  generated  by  the  Airport's  accounting  software 
do  not  store  a  record  of  wtio  created  the  invoice  for 
receipt  of  an  individual  payment.  (The  audit  team 
assessed  the  potential  for  changing  the  Airport's 
accounting  software  and  determined  it  was  not  a  cost- 
effective  approach.) 

None  of  these  procedures  result  in  a  record  of  who 
completed  the  tasl<.  As  a  result,  there  is  insufficient 
accountability  for  these  transactions. 

Recommendation  The  GTU  should: 

6.  Implement  a  procedure  that  results  in  documentation  of 
which  GTU  staff  member  accepted  each  payment 
processed  in  the  GTU  office. 

GTU  Does  Not  Generate        The  GTU  does  not  maintain  an  adequate  record  of  the 
a  Sufficient  Record  of  payments  it  accepts.  Designated  staff  prepare  a  summary 

Accepted  Payments  for  each  payment  batch.  The  staff  initial  the  summary  and 

submit  it  to  GTU  management  for  approval.  A  GTU 
manager  provides  signature  approval  of  the  summary 
before  it  is  transmitted  to  the  accounting  unit  for  final 
processing.  This  dual  approval  procedure  is  an  appropriate 
control;  however,  the  GTU's  procedures  have  the  following 
shortcomings: 

•  The  payment  batch  summary  for  checks  accepted  does 
not  document  each  individual  check,  including:  payer, 
check  date,  check  number,  and  check  amount.  Rather, 
the  batch  summary  only  includes  the  number  of  checks 
and  total  amount  of  all  checks  (e.g.,  eight  checks 
totaling  $450). 

•  Staff  are  not  required  to  issue  a  receipt  for  each 
transaction.  Receipts  are  required  only  if  requested  by 
the  customer. 

•  The  GTU's  procedures  do  not  require  retention  of  a 
copy  of  each  approved  payment  batch  summary  that  is 
forwarded  to  the  accounting  unit. 

Accountability  for  payments  accepted  is  reduced  when  a 
receipt  is  not  provided  to  each  customer  and  when  transfers 
«  of  cash  receipt  batches  from  the  GTU  to  the  accounting  unit 

are  not  fully  documented. 
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Recommendations 


The  GTU  should: 


7.  Update  the  format  of  its  batch  summary  to  document 
each  individual  check,  including:  payer,  check  date, 
check  number  and  check  amount. 

8.  Retain  an  electronic  or  hard  copy  of  each  batch 
summary. 

9.  Issue  a  receipt  to  the  customer  for  each  payment 
transaction. 
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APPENDIX  A:  DEPARTMENT  RESPONSE 


SFO 


San  Francisco  international  Airport 


P.O.  Box  809/ 

Sjn  Frdnmco,  C.'V  94 1 2H 

March  24,  2010 

fax  6S0.821.S0SS 


COMMISSION 

til*  ANDfUUNlY 
or  SAN  Flt«N<liCO 


Mr.  Ben  Rosetifield,  Coniroller 
City  and  Oiuiity  of  San  Francisco 
City  Hall,  Room  316 
I  Dr.  Carlton  B.  Goodlcn  Place 
San  Francisco,  C'A  91 1 02 

Dear  .Mr.  Rosen  Held: 


r,«viNKiw5ou  Thank  you  for  your  teanr.s  biiipport  in  condncting  the  recent  Cash  Handling  Audit  of  procedures 

v«o(t  a(      Ground  Transportation  Permit  Processing  Unit  ((/ TPPl.)  at  San  l-rancisco  International 

lAimv  HuTjoiA  -Airport  (SFO).  Wc  arc  confident  having  been  through  this  audit  our  operation  will  run  tnuch 

fnesioitT  smoother  and  with  liahler  controls. 


net  i-Kaiofii 


EltANUK  ;OKH> 
l%lt.HAftp  <,UGCtNH)M£ 


JOHN  J.  MARTIN 


We  have  carefully  reviewetl  your  team's  draft  report  and  findings  and  concur  with  each  of  the 
recommenclalions  provided.  Attached  is  the  completed  Aiidil  Rccoriimcndalion  imd  Response 
Form  with  our  responses  to  each  finding. 

Should  you  have  further  questions  or  need  additional  information,  please  do  not  hesitate  to 
contact  me  directly. 

Again  thanks  for  your  suppiirf  . 


Sincerely. 


Henr)'  1,.  Thompson,  A.A.R. 
Assistant  Deputy  Airpoil  Director 
Operations  Management 


Attachment:  Atidit  Recommendation  and  Response  Fonn 


Tryg  McCoy,  Deputy  Director  Operations  and  Security 
Leo  Fermin.  Deputy  Director,  business  and  Finance 
Abuhaker  .A/uni.  Laiuiside  Operations  Manager 
Derrick  Phipps,  Manager.  Ground  Transportation  Unit 
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